Hello,
Can you tell me from which stunnel version, the "bin" folder and the "config" folder appeared ?
The change is between the version 4.53 and 5.26, but which one ?
Thanks a lot for the answer
Best regards, Manu
Dear All,
Currently we are using syslog communication without any security. That is using UDP protocol with the server listening on port number 514. This is unsecure.
I want to use syslog over TLS that is over TCP .
As of now in my project syslogd daemon is used. I am planning to use stunnel to achieve this.
I have few questions. Please clarify
* To support stunnel, syslogd should be on TCP and not on UDP?
* Is stunnel is a daemon ?
* My understanding is syslogd forwards messages to the stunnel local portal at port 61514.
The local stunnel forwards data via the network to port 60514 to its remote peer.
* I assume stunnel-5.26(stunnel-5.26.tar.gz) is the latest version and this can be used on linux
Regards,
Girish
Hi,
Once again, thanks a lot for taking care of stunnel!
Attached is a trivial patch for two minor typo fixes. Thanks in
advance for looking over it :)
G'luck,
Peter
--
Peter Pentchev roam(a)ringlet.net roam(a)FreeBSD.org pp(a)storpool.com
PGP key: http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115 C354 651E EFB0 2527 DF13
Hi,
The website and the documentation does not indicate and a Google
search does not give any relevant results, so I would like to ask if
Stunnel supports OCSP stapling?
Thank you,
Ádám
Is STunnel 5.22 supported on Windows 2003 server?
Thanks,
DEEPAK SUBBANARASIMHA
Kewill
DDI: +00 (1) 978 482 2625
Email: deepak.subbanarasimha(a)kewill.com<mailto:deepak.subbanarasimha@kewill.com>
www.kewill.com<http://www.kewill.com/>
Tel: +00 (1) 978 482 2500 | Fax: +00 (1) 978 482 2501
1 Executive Drive, Chelmsford, MA 01824, USA
IMPORTANT NOTICE: This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by telephone at (978) 482-2500 and return the original message to us at the listed email address. In accordance with Kewill policy, emails sent and received may be monitored. Kewill accepts no responsibility for any loss or damage should this email contain any virus, or similar destructive or mischievous code. Thank You. Copyright (c) 2013 by Kewill Inc
IMPORTANT NOTICE: This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately return the original message to the sender at the listed email address. In accordance with Kewill policy, emails sent and received may be monitored. Although Kewill takes reasonable precautions to minimize the risk, Kewill accepts no responsibility for any loss or damage should this email contain any virus, or similar destructive or mischievous code.
On AIX 6.1 using IBM's XLC compiler, I do "configure" and that successfully
completes. However, when I "make", it fails due to the parameters
"-fstack-protector" and "-fPIE"... apparently it couldn't find the files
"stack-protector" and "PIE" as "-f" specifies a file. However, gcc and
perhaps many other cc variants, "-f" specifies a compile option. I was able
to compile with XLC by ripping out the "stack-protector" and "PIE" sections
of "configure" and running "make" but it would be best to use the stack
protector mechanisms used for AIX's XLC:
https://www.ibm.com/developerworks/mydeveloperworks/blogs/b10932b4-0edd-4e6…
Has anyone compiled Stunnel 5.26 using IBM's XLC without removing the
stack-protector and PIE sections in the configure file?
The other option is to use gxlc instead of xlc to map the GNU C compiler
options to XLC options. Would that be preferred (less modification of
configure file)? I was able to get that working, but still an unusually
high number of warnings.
http://geco.mines.edu/files/manuals/xlc/mapping.pdf
The article above (from IBM) has "-qstackprotect=size=N" - what suggestion
parameter to use for "N"?
To be nice to everyone's mailbox, I have posted the logs here:
Stunnel 5.26 AIX XLC - fails
http://pastebin.ca/3250237
Stunnel 5.26 AIX GXLC - passes
http://pastebin.ca/3250242
Thanks,
-Rob
We are currently using Stunnel on a stand-alone PC to link a 3rd party
application that monitors a Graphical User Interface application for alarm
notification. Stunnel is used to link this 3rd party alarm notification
software to be able to send message to Amazon Web Services for email
distribution to the users/operators that need this information.
IT would like to investigate having all applications operate from a server
possibly running 2012 OS, in a virtual environment. The GUI and 3rd party
software will operate in this environment and I wanted to see if Stunnel
would have any issues continuing to send messages out to Amazon.
Thank you,
Duane Moody
Global Data Specialists
1815 W. 1st Ave, Suite 110
Mesa, AZ 85202
PH: 480-461-3401, Ext 223
Fax: 480-461-3411
Cell: 602-696-9457
www.gbl-data.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Dear Users,
I have released version 5.25 of stunnel.
The ChangeLog entry:
Version 5.25, 2015.11.02, urgency: MEDIUM
* New features
- SMTP client protocol negotiation support for
"protocolUsername", "protocolPassword", and
"protocolAuthentication" (thx to Douglas Harris).
- New service-level option "config" to specify OpenSSL
>=1.0.2 configuration commands (thx to Stephen Wall).
- The global option "foreground" now also accepts "quiet"
parameter, which does not enable logging to stderr.
- Manual page updated.
- Obsolete OpenSSL engines removed from the Windows build:
4758cca, aep, atalla, cswift, nuron, sureware.
- Improved compatibility with the current OpenSSL 1.1.0-dev tree:
gracefully handle symbols renamed from SSLeay* to OpenSSL*.
* Bugfixes
- Fixed the "s_poll_wait returned 1, but no descriptor
is ready" internal error.
- Fixed "exec" hangs due to incorrect thread-local
storage handling (thx to Philip Craig).
- Fixed PRNG initialization (thx to Philip Craig).
- Setting socket options no longer performed on PTYs.
- Fixed 64-bit Windows build.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
1fb2209f1e006cc01813e1688599c4d0fb0adde4434c31ab95745b1db97484b7
stunnel-5.25.tar.gz
506846a28154e5111c6f374de5861c51221a5c9ddcf012952eaf7b4819176cd9
stunnel-5.25-installer.exe
58e79879a5fa922e2ae28ef0892f447d92d27517dfc0f921095b7180a7fd6905
stunnel-5.25-android.zip
Best regards,
Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=WhEM
-----END PGP SIGNATURE-----